Skip to content
BackEsc
Sign in

No weakness recorded · 2015

No weakness recorded: 2015

1,292 CVEs · 10 exploited

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE whose record names no weakness (CWE), published in 2015. The named ones are the most at risk.

exploited in the wild
10
check available
4
likely to be exploited
133

Every one of the 1,292 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.CVE-2014-8361Realtek · CVSS 9.8 · 100% likelycovered by CyberSIXT

    Realtek2 articles

  2. ElasticSearch - Remote Code ExecutionCVE-2015-1427Elastic · CVSS 9.8 · 100% likely

    Elastic

  3. Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted EPS image, aka "Microsoft Office Malformed EPS File…CVE-2015-2545Microsoft · CVSS 7.8 · 86% likely

    Microsoft

  4. Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote…CVE-2015-0311Adobe · CVSS 7.8 · 86% likely

    Adobe

  5. Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to execute arbitrary code…CVE-2015-7645Adobe · CVSS 7.8 · 65% likely

    Adobe

  6. Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as expl…CVE-2015-1701Microsoft · CVSS 7.8 · 56% likely

    MicrosoftAPT28

  7. The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010 SP2; Live Meeting 2007 Console; Lync 2…CVE-2015-1671Microsoft · CVSS 7.8 · 49% likely

    Microsoft

  8. Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulnerability."CVE-2015-0071Microsoft · CVSS 6.5 · 34% likely

    Microsoft

  9. Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability…CVE-2015-2590Oracle · CVSS 9.8 · 25% likely

    Oracle

  10. The kernel in Microsoft Windows 10 Gold allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Elevation of Privilege Vulnerability."CVE-2015-6175Microsoft · CVSS 7.8 · 5.3% likely

    Microsoft

  11. Kaseya Virtual System Administrator - Open RedirectCVE-2015-286310% likely
  12. vsftpd <= 3.0.2 - Access Restriction BypassCVE-2015-14196.8% likely
  13. WordPress StageShow <5.0.9 - Open RedirectCVE-2015-54616.2% likely
  14. Kentico CMS 8.2 - Open RedirectCVE-2015-78235.1% likely
  15. The AuthenticationFilter class in SolarWinds Storage Manager allows remote attackers to upload and execute arbitrary scripts via unspecified vectors.CVE-2015-537193% likely
  16. Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to…CVE-2015-035992% likely
  17. The JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 before u1 does not restrict registration of MBeans, which allows remote attacke…CVE-2015-234289% likely
  18. Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cau…CVE-2015-031875% likely
  19. Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code by lev…CVE-2015-033671% likely
  20. ZOHO ManageEngine OpManager 11.5 build 11600 and earlier uses a hardcoded password of "plugin" for the IntegrationUser account, which allows remote authenticated users to obtain a…CVE-2015-776567% likely
  21. Unrestricted file upload vulnerability in D-Link DCS-931L with firmware 1.04 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an ex…CVE-2015-204967% likely
  22. Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27.8.4 and 28.3.4 allows remote attackers to affect confidenti…CVE-2014-659366% likely
  23. Unrestricted file upload vulnerability in admin/scripts/FileUploader/php.php in the ReFlex Gallery plugin before 3.1.4 for WordPress allows remote attackers to execute arbitrary P…CVE-2015-413362% likely
  24. Unrestricted file upload vulnerability in UploadHandler.php in the WP Symposium plugin 14.11 for WordPress allows remote attackers to execute arbitrary code by uploading a file wi…CVE-2014-1002159% likely
  25. Unrestricted file upload vulnerability in admin/upload-file.php in the Holding Pattern theme (aka holding_pattern) 0.6 and earlier for WordPress allows remote attackers to execute…CVE-2015-117258% likely
  26. Use-after-free vulnerability in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before…CVE-2015-308057% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in